🔐 CVE Alert

CVE-2025-60212

HIGH 8.8

WordPress VEDA Theme <= 4.2 - PHP Object Injection Vulnerability

CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
0th

Deserialization of Untrusted Data vulnerability in designthemes VEDA veda allows Object Injection.This issue affects VEDA: from n/a through <= 4.2.

CWE CWE-502
Vendor designthemes
Product veda
Published Oct 22, 2025
Last Updated Apr 1, 2026
Stay Ahead of the Next One

Get instant alerts for designthemes veda

Be the first to know when new high vulnerabilities affecting designthemes veda are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

designthemes / VEDA
0 ≤ 4.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗
patchstack.com: https://patchstack.com/database/Wordpress/Theme/veda/vulnerability/wordpress-veda-theme-4-2-php-object-injection-vulnerability?_s_id=cve

Credits

Bonds | Patchstack Bug Bounty Program